We host our site on Vercel, and leverage their preview links for development and QA. These links are generated for each new feature our team is working on, and have a format similar to: https://<feature>-<organization>.vercel.app We use the same login info for all the preview sites, but 1pass does not seem to recognize these domains when using vercel.app as the URL (or any other variation). Is there a way to enable willdcard or subdomain matching to work for these links? It's a major pain-point for our team jumping between different feature branches throughout the day. 1Password Version: 7.9.9 Extension Version: 2.9.0 OS Version: MacOS 13.2 Browser:_ Chrome

Hey cjkochis, I'm so sorry for the delay in getting back to you. I have filed a request with the team to see if we can improve the behaviour when using Vercel preview links in a future update. We are always looking to improve the autofill behaviours of 1Password so I recommend updating to 1Password 8 at your earliest convenience as 1Password 7 will not receive these new feature updates. Within 1Password 8 we have recently introduced exact matching for domains so you can choose whether an item is offered across and entire domain on a specific sub domain. Here is some more information: Change where a login is suggested and filled. Let us know if you have any questions! ref: 32701067

Hi steph_giles , Thanks for the reply, and filing the request. This feature would be greatly appreciated by our team. FYI, I did update to 1Password8, and still does not seem to match across the Vercel subdomains.

Hey cjkochis, Thank you for getting back to me. I hope we can improve the behaviour in 1Password 8 in a future update.

I suspect this is because .vercel.app is on the "eTLD" list https://publicsuffix.org/list/public_suffix_list.dat. That means the domain .vercel.app is effectively a top-level domain (like .com or .org). This is relevant for security because it means that anyone can host something on a subdomain. For example, browsers use this list for cookie security and I suspect 1password is also using this list to see if two domains can be considered related. E.g.: - If you have a password for a.google.com, you should also be able to use it on b.google.com. - But if you have a password for a.uk.org, you should not be able to use it on b.uk.org. .com, .uk.org and .vercel.app are all considered effective top-level domains (eTLD). And only if the domain one down from the eTLD (so-called eTLD+1) is the same, the domains should be considered related. That being said, it is extremely annoying: Vercel is a service for developers, the Vercel preview environments on .vercel.app are only used to preview websites, and Vercel is constantly generating new Preview environments with defacto random names. If I save a login for a preview (.vercel.app) URL, I will almost always want to use it on another preview domain. And the chances of someone tricking me into filling the password into a preview environment from someone else are relatively small. Please make an expectation for .vercel.app. Yes, it should be on the eTLD list but no IMO 1Password should not treat it like other eTLDs.

I just ran into this same issue today. Would LOVE a fix.

Support for Vercel preview links | 1Password Community

14 Replies

1P_Evon
1Password Team
2 years ago
HulerDan, thank you for your reply. I've shared your feedback with our product team.

I'm sorry, I don't have an alternate solution other than to save the "example.vercel.app" website URL to the Vercel Login item. I realize this may not be ideal, and I apologize for any interruption in your workflow caused by this issue.

I hope that helps.

-Evon

ref: PB-38963154
HulerDan
New Contributor
2 years ago
1P_Evon - I'd like to +1 on this feature request.

Although nzCharlie's solution would work, its additional cost for us that isn't acceptable right now.

We've also recently moved over from LastPass which had the wildcard feature that helped with this, so the dev team is busting my chops a bit on the change.

Any advice or alternate solutions would be amazing, we're in the exact same postion as cjkochis (and many others historically looking through previous posts).
1P_Evon
1Password Team
2 years ago
Hello cjkochis, I don't have any news to share about the feature request. I appreciate that this feature is useful for this case, and I'll be happy to advocate on your behalf to the team.

Let me know if you have any further questions.

-Evon
cjkochis
New Contributor
2 years ago
Hi there, just wanted to check in and see if there is any update on the feature request.
steph_giles
1Password Team
2 years ago
Thank you for sharing this @nzCharlie!
Former Member
2 years ago
As an alternative for work around for this issue, you can ask the dev team to assign a custom domain for the Vercel preview environments (e.g. random-id.preview.yoursite.com), so that your environment is always on a subdomain.
steph_giles
1Password Team
2 years ago
Hey cjkochis,

I'm afraid I don't have any updates at this time but I have flagged it again with the team.

Let us know if there's anything else we can help with and have a great weekend!
cjkochis
New Contributor
2 years ago
Any update on this?
steph_giles
1Password Team
2 years ago
Hey @moritzkn, @zackdn,

I'm so sorry for the delay in getting back to you on this one.

I have passed all of this detail on to the team, thank you for your feedback.

ref: PB34694450
ref: PB34694437
Former Member
2 years ago
I just ran into this same issue today. Would LOVE a fix.